Having a VLAN alone doesn't necessarily make it more secure, you have to have the cameras on a completely separate IP network and only allow traffic in and out of that network that is essential for you to access what is there and from hosts/places that are trusted. Your USG has multiple ports so...